Overview

Kubernetes is the backbone of modern cloud-native applications, but securing its API and network communication is critical. In this course, you will learn how to protect your Kubernetes environment from unauthorized access, enforce security policies, and ensure encrypted communication between services.Course ContentArchitecture of the Kubernetes ClusterUnderstanding the Kubernetes architecture with examplesWorking with KubernetesRoles of the Master NodeComponents of the Control Plane (Master Node)API ServerEtcdSchedulerController ManagerKubeletService ProxyPOD (Pod)Container Engine (Docker, Containerd, or Rocket)RBAC Policies for Securing Kubernetes API AccessIntroductionKey components of RBACHow RBAC works in Kubernetes API Access?How Role and RoleBinding Work TogetherKubernetes Roles: Defining Permissions and AccessPermissions Granted by Kubernetes RolesCreate a roleBind the Role to a User or Service AccountHands-On Lab: Implementing RBAC in KubernetesIntroduction to Scenario-Based RBAC ExercisesSet Up a VM for a Minikube ClusterSet Up a K8s Minikube Cluster - Part 1Set Up a K8s Minikube Cluster - Part 2Set Up a K8s Minikube Cluster - Part 3Start the K8s Minikube ClusterCreate a Namespace and Run a PodClient Authentication using SSL/TLS CertificatesOverview of Client Certificate GenerationGenerate a Private KeyGenerate a Certificate Signing Request (CSR)Sign a CSR with Minikube's CA to Generate a User CertificateSet Client Credentials in Kubernetes ConfigVerify User Credentials in Kubernetes ConfigRBAC: Role and RoleBindingCreate a RoleVerify the Role and Its Associated PermissionsCreate a RoleBinding to Assign a UserTest RBAC PermissionsExpand RBAC Permissions to Manage Pods in a NamespaceGenerate a Private Key and CSRGenerate a User Certificate by Signing CSR with Minikube CASet User Credentials in Kubernetes (K8s)Create a Role with Specific PermissionsCreate a RoleBindingRBAC Testing: Validate PermissionsAccess the K8s Minikube Cluster as a UserList and Manage Kubernetes ContextsSet Up a Kubernetes Context for a UserVerify RBAC Permissions in a New ContextSet Up a K8s Context for a Different UserTest RBAC Permissions for Pod CreationModify RBAC Role Permissions in K8sImplement and Test Network Policies for Pod CommunicationIntroduction to Kubernetes Network PoliciesWhy Restrict Pod-To-Pod Communication?Understanding K8s Network Policies and CNI PluginsExample Use Case ScenariosHands-On Lab: Enforcing Pod-to-Pod Restrictions with Network PoliciesSet Up a VM for a Kubernetes ClusterStart Minikube with Cilium CNIDeploy Two Pods and Assign LabelsTest Pod-to-Pod Connectivity with CurlCreate a Network Policy to Restrict Pod CommunicationVerify Pod-to-Pod Connectivity is BlockedNetwork Policy to Restrict Ingress and Egress TrafficConfiguring Network Policy for Selective Pod CommunicationOverview of Selective Pod CommunicationNetwork Policy for Selective Pod CommunicationTest Pod ConnectivityDeploy a Pod and Verify Its Network ConnectivitySecuring, Deploying, and Accessing Nginx in KubernetesOverview of Securing Nginx with HTTPSDeploy and Expose a Nginx Pod to External TrafficAccess Nginx Web Server Through HTTPSet Up Nginx on Host Machine for Accessing Nginx PodAccess Nginx Web Server via Web Browser (HTTP Only)Secure Nginx Server with HTTPS (TLS) on K8s ClusterDeploy and Expose a Nginx Pod to External TrafficGenerate a self-signed TLS CertificateStore the TLS Certificate as a SecretCheck Minikube's Ingress Controller StatusCreate Ingress Resource for HTTPSLast lecture

Skills

Reviews